Difference between revisions of "Query Meta Data"

From Observer GigaFlow Support | VIAVI Solutions Inc.
Jump to: navigation, search
(Created page with "Table Query select (cast(meta::json->>'netscalerSmoothedRoundTripTime' as int))::bigint as avalue, count(*) as acount from netflow WHERECLAUSE group by avalue ORDERBY LIMITRO...")
 
Line 3: Line 3:
  
 
Graph Query
 
Graph Query
  select FIRSTSEEN as afirstseen,appid ,avg(cast(meta::json->>'netscalerSmoothedRoundTripTime' as int))::int as aavg from netflow  WHERECLAUSE  and (meta::json->>'netscalerSmoothedRoundTripTime' )is not null group by afirstseen,appid o
+
  select FIRSTSEEN as afirstseen,appid ,avg(cast(meta::json->>'netscalerSmoothedRoundTripTime' as int))::int as aavg from netflow  WHERECLAUSE  and (meta::json->>'netscalerSmoothedRoundTripTime' )is not null group by afirstseen,appid order by appid,afirstseen
 +
 
 
<gallery>
 
<gallery>
 
File:Metaquery.png|Report Query
 
File:Metaquery.png|Report Query
  
 
</gallery>
 
</gallery>
rder by appid,afirstseen
 

Revision as of 12:07, 14 April 2022

Table Query

select (cast(meta::json->>'netscalerSmoothedRoundTripTime' as int))::bigint as avalue, count(*) as acount from netflow WHERECLAUSE group by avalue ORDERBY LIMITROW

Graph Query

select FIRSTSEEN as afirstseen,appid ,avg(cast(meta::json->>'netscalerSmoothedRoundTripTime' as int))::int as aavg from netflow  WHERECLAUSE  and (meta::json->>'netscalerSmoothedRoundTripTime' )is not null group by afirstseen,appid order by appid,afirstseen